CVE-2019-17378

cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...

CVE-2019-17378

CVE-2019-17378 affects cPanel prior to 82.0.15, where the SSL Key Delete interface is vulnerable to self XSS (SEC-526). The issue originates from inadequate input validation on a client-side operation, enabling injection of script in the SSL Key Delete flow. Impact is described as a self XSS vuln...

CVE-2019-17377

The CVE-2019-17377 issue affects cPanel prior to 82.0.15, where the LiveAPI sample scripts are vulnerable to self-XSS due to insufficient validation of client‑side data in the web application. Exploitation could allow an attacker to execute arbitrary client-side code within affected sessions. Rem...

CVE-2019-17377

cPanel before 82.0.15 allows self XSS in LiveAPI example scripts SEC-524...

CVE-2019-17376

cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface SEC-521...

CVE-2019-17376

CVE-2019-17376 affects cPanel prior to 82.0.15, where the SSL Certificate Upload interface is vulnerable to self-XSS due to insufficient validation in client-side data handling. Multiple sources confirm the flaw exists in the SSL Certificate Upload feature and is tied to versions older than 82.0....

CVE-2019-17375

CVE-2019-17375 affects cPanel prior to 82.0.15. The vulnerability allows API token credentials to persist after an account is renamed or terminated (SEC-517). Impact includes persistence of credentials that may enable access after account changes, with CVSS v3.1 base score high (8.8) and CVSS v2 ...

CVE-2019-17375

cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated SEC-517...

cPanel Input Validation Error Vulnerability (CNVD-2019-29015)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions prior to cPanel 55.9999.141. The vulnerability stems from a lack of...

cPanel cross-site scripting vulnerability (CNVD-2019-29016)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in X3 Reseller Branding Images in versions prior to cPanel 55.9999.141. The...

cPanel cross-site scripting vulnerability (CNVD-2019-33879)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel. An attacker can exploit this vulnerability to execute client-side code...

cPanel Authorization Issues Vulnerability (CNVD-2019-28996)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a lack of...

cPanel Information Disclosure Vulnerability (CNVD-2019-29005)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a configurati...

cPanel Information Disclosure Vulnerability (CNVD-2019-29010)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a configurati...

cPanel Information Disclosure Vulnerability (CNVD-2019-29001)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a configurati...

cPanel cross-site scripting vulnerability (CNVD-2019-28999)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Apache Configuration Include Editor in versions prior to cPanel 68.0.27. T...

cPanel Access Control Error Vulnerability (CNVD-2019-29007)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An access control error vulnerability exists in versions prior to cPanel 55.9999.141. The vulnerability stems from a network syst...

cPanel Authorization Issues Vulnerability (CNVD-2019-29008)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of...

cPanel Authorization Issues Vulnerability (CNVD-2019-28997)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit this vulnerability to bypass the...

cPanel Input Validation Error Vulnerability (CNVD-2019-29009)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a network...